Extracted

• • Target
    b87e0ddd2bd8509e29d413b7ed101f91.exe
  • Size 188KB
  • SHA256 cbc184b858c1c7db4e0977e0077088fa125dd0e06d400e3f6799c4e1a01ebdf5
  • MD5 b87e0ddd2bd8509e29d413b7ed101f91
  • SHA1 87ef51923bd27a0e3b5170a76c2a51074b69cf8b
  • SHA512 b9c1900d1c409f79c9f678bb8120a103630b2245659d0d81d765d64a678b029ba4c1fff62eeed038ef46df05e74e34124b5f5e8c11988ccb0c890d53b6be8855
  • MD5 SHA1 SHA512

  Score

  10^/10

  redlinewhitenewusadiscoveryinfostealerspywarestealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine Payload

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2